MAL-2025-112049 Malicious code in late_locust_apricot-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ded5f0420f8e564fe6c6f52eff5345fda7841b5a0dc284677be924fc442fa745 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111973 Malicious code in hidden_mastodon_salmon-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 148dbda5dfbafb290510b2cf7dfbaf42d6cb5b2478404d51b6e77d7d70243bf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bad_sawfish_blush-95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 146925d01ceb9c7866c0d8583ba28de71917c40669bb29b6a65ef23c60d16d2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in skilled_albatross_amaranth-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0ae66e441a2dac2479b6054d6df2a6a14ac11b0da13bb51a1f82065e4404284 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112163 Malicious code in outstanding_locust_jade-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea6c56b4a8bd83f10a9e8ed58a094f080e301fdedbaf8ffb10ed26087a35e900 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in multiple_stoat_amethyst-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b9654c763cad68cdc5381691976c9da88d614b9b1210cc2bf0436ff23034aa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112105 Malicious code in mixed_newt_black-96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc9e699bd3f8ec9ee4a314ae8d330472bfeefd5ec88b2b741044de347a1d3b2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in communist_whippet_bronze-71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a5f75e7257f9258c99387f5044e6144cc690e3970a02e26cff524a417408aaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111832 Malicious code in dutch_meerkat_amber-65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90488e88f739b4039254d196e32e421d886cab3a6ba3653257880cf78da5416f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111801 Malicious code in desirable_coyote_green-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97ab26356b5ddb5241a91961a3d803f0fc6cde498b444b3db7dd65be540c3342 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112263 Malicious code in roasted_rabbit_brown-55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67266a37d0cab164d86dc4379edd93a92bb3b5ce2287af256b601953d5f2c06f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amazing_landfowl_lavender-86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83a876f62755a44017f9c2d25c82ec04d0927b01ad9b22c6f7d2c32396804db5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gay_mollusk_maroon-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 689f12f13e942114d7205e63f9121268d11de0bd26ba933f500d0d56ceeb9844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glorious_jay_chocolate-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b49be4ee470e9c591ccd14db42661c1b04cb948827980ef3a82b3da3473d2f7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112151 Malicious code in opposite_guppy_silver-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c39ead040d48951309e5d19660e9a7a58f4e8bb7e8e139fc813562cabce41a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112125 Malicious code in nervous_koala_peach-57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb7a2306522f18c1a15d054bb3f44ea78a725748b3a4b9fdae7bc61e33ff781f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112331 Malicious code in sorry_buzzard_blue-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ab8442ed09033ce6ad2c2cab451d7c3a89c72859abd38615db3884d82be2e2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hungry_pike_white-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ff110377eee0100498a1da8413d51c66a010207411affee6217abccaff414a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in favourable_swordfish_gold-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43e9f1f9e843dda8cf1267324b29ada6688db5fcf5451d9dc6b67ad49218122b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in basic_cricket_lavender-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a76e4a70d6ab7967fb97a0f1139e6f9b5a4b930871f5a6ef80f4c80b8ce2f98c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...